From 88d80018b52a4b815b5e140c3cd1dd9326567bae Mon Sep 17 00:00:00 2001 From: Anton Khorev Date: Wed, 4 Dec 2024 19:26:21 +0300 Subject: [PATCH] Include data: when using allow_thirdparty_images CSP --- app/controllers/application_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 7ce804ced..fc90e0be7 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -21,7 +21,7 @@ class ApplicationController < ActionController::Base def self.allow_thirdparty_images(**options) content_security_policy(options) do |policy| - policy.img_src("*") + policy.img_src("*", :data) end end -- 2.39.5